
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35302e302f32342d3234203d3e2034383437.roa
File: 3130332e3231332e35302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: c8JJpjZ5u5ZwpHM0AbpORt6sbbGIUmg8gZ6sTpa4vh8=
Subject key identifier: 6C:E8:BC:C8:24:E7:3A:99:FF:39:2E:63:AF:B4:93:89:94:63:F5:62
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 448D0A6C22833CFB225849909A00C579953A0C75
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35302e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 08:54:34 +0000
ROA not before: Thu 04 Jun 2026 08:49:34 +0000
ROA not after: Thu 03 Jun 2027 08:54:34 +0000
asID: 4847
IP address blocks: 103.213.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8d:0a:6c:22:83:3c:fb:22:58:49:90:9a:00:c5:79:95:3a:0c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:49:34 2026 GMT
Not After : Jun 3 08:54:34 2027 GMT
Subject: CN=6CE8BCC824E73A99FF392E63AFB493899463F562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:90:92:3c:5a:c1:10:f9:c0:d9:10:6e:8a:
80:09:63:d0:3a:44:f6:16:bf:6b:37:02:08:4a:b8:
ed:57:f3:aa:92:de:ae:c5:6f:9a:c4:ed:e4:2d:b8:
49:fa:a3:c9:49:0d:97:9b:fd:80:7b:dc:64:46:7d:
52:35:84:c5:53:16:61:e3:a7:37:16:a3:30:ce:cf:
5d:e5:6a:7b:0f:fa:3b:db:50:18:44:20:2f:4f:d6:
8a:3c:dc:b0:c2:0f:30:99:f2:57:6e:b8:81:89:e7:
84:f2:b0:dc:08:0e:29:6d:d6:a2:cc:92:d4:3e:b5:
d3:47:42:8f:a8:2e:18:44:e3:53:72:ea:ad:38:f1:
a5:39:d8:f9:3f:0f:f7:42:45:21:cd:c4:41:4e:71:
e7:1b:54:b9:58:1c:37:28:68:06:02:4b:ce:f2:1a:
31:e9:60:c8:fe:cb:c1:4e:be:18:97:53:c7:f9:24:
fe:d3:77:00:5a:cc:e1:15:51:f9:0b:40:5a:45:a1:
4a:16:35:8e:8f:d0:d5:99:da:f9:e8:87:e6:98:b7:
4c:59:d9:52:c4:9e:04:ef:bf:a3:9e:87:cd:09:84:
bb:08:c3:24:28:30:5f:10:df:2e:1a:c7:4d:ab:ea:
7b:5d:a9:1c:b7:e5:5a:c4:1a:88:92:ed:14:f2:63:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:BC:C8:24:E7:3A:99:FF:39:2E:63:AF:B4:93:89:94:63:F5:62
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35302e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.213.50.0/24
Signature Algorithm: sha256WithRSAEncryption
16:25:bd:32:3a:7d:71:6a:77:1e:99:bd:e4:97:4f:f6:3e:5f:
ce:9b:34:36:74:00:28:7c:64:04:25:5c:1c:15:f4:49:11:29:
d4:6e:d1:91:ca:77:15:63:b0:02:03:53:cb:96:01:68:1a:f8:
96:9d:b6:c4:ac:3b:a8:28:42:7b:ae:9e:bf:03:25:a0:02:b3:
9b:bf:49:dc:c8:07:43:fe:77:c3:66:e5:c3:29:28:8e:7f:f8:
70:e5:55:c9:a4:65:1b:ba:e2:0a:51:9c:bf:df:ae:df:99:23:
1a:ae:cd:c3:d3:e0:a4:c5:ce:e1:30:c2:fe:bb:a0:64:d2:10:
2f:9f:e4:2c:c8:e3:a2:88:12:60:4e:c5:fc:4f:c5:f3:c4:5a:
7e:4a:9a:7d:2a:8d:16:fb:85:98:9c:4f:f8:ae:1b:73:6f:2a:
95:da:5c:69:f3:af:f2:26:bf:f5:43:ba:f8:2b:9d:c4:31:b5:
b0:f6:c0:a8:ce:d6:20:0d:93:6a:46:b5:02:28:2b:b8:63:1a:
a3:fe:48:27:81:e0:0c:69:5e:88:0c:81:98:b1:80:f8:69:69:
14:ff:06:17:e0:68:64:f6:bd:21:fd:60:f4:47:ea:ab:0a:91:
b2:3f:01:b3:68:be:90:7b:64:dc:c5:fd:d8:a2:43:38:ea:bf:
66:e3:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client